Personalizer OS

Privacy Policy

Last updated: July 4, 2026

This Privacy Policy explains how Custom Fabrica ("we", "us", or "our") collects, uses, and protects information when you use Personalizer OS (the "Service").

1. Information we collect

  • Account data: name, email, password hash, role, tenant association, and optional two-factor authentication secrets (stored encrypted).
  • Store and order data: connected store credentials (encrypted), product configurations, personalization inputs, render outputs, and fulfillment metadata.
  • Usage data: render counts, API activity, audit logs, and billing events for quota enforcement and security monitoring.
  • Technical data: IP address, browser type, request logs, and error diagnostics.

2. How we use information

We use collected information to:

  • Provide, secure, and improve the Service
  • Process renders, orders, and integrations with connected platforms
  • Enforce plan limits, prevent abuse, and investigate incidents
  • Send transactional emails (password reset, billing notices, security alerts)
  • Comply with legal obligations

3. Sharing

We do not sell personal information. We share data with subprocessors that help us operate the Service (hosting, email, payment processing, fulfillment partners) under contractual safeguards, and when required by law.

4. Retention

We retain account and operational data for as long as your subscription is active and as needed for billing, security, and legal compliance. Backups may persist for a limited retention window before deletion.

5. Security

We use encryption in transit, encrypted storage for sensitive credentials, role-based access controls, audit logging, and optional two-factor authentication for internal admin accounts. No method of transmission or storage is completely secure.

6. Your choices

You may update account details, change your password, enable or disable two-factor authentication (internal accounts), and request account deletion from account settings where available. Contact us for data access or deletion requests not available in the product.

7. International transfers

If you access the Service from outside the country where our infrastructure is hosted, your information may be processed in that jurisdiction.

8. Children

The Service is not directed to children under 16, and we do not knowingly collect their personal information.

9. Changes

We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated date.

10. Contact

Privacy questions: privacy@customfabrica.com